Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/7ff95407-f623-3c8e-89da-22d5b27ee0b1.roa
File:                     7ff95407-f623-3c8e-89da-22d5b27ee0b1.roa (raw, json)
Hash identifier:          AKQ1GZt04EKdrgmRBO9Gu1siD6htqmdP0nY5lhjYA5U=
Subject key identifier:   4E:B6:CA:5D:08:85:0B:00:5E:A5:57:9A:5F:FF:7C:02:F8:F8:6A:67
Certificate issuer:       /CN=e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf
Certificate serial:       010D0C9F4328584E2AD457057399A9C3462FFF80
Authority key identifier: 79:4E:35:8D:AC:45:13:27:8B:65:94:A9:E2:BA:54:F4:4C:0A:4D:C7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/7ff95407-f623-3c8e-89da-22d5b27ee0b1.roa
Signing time:             Sun 14 Jun 2026 09:00:11 +0000
ROA not before:           Sun 14 Jun 2026 09:00:11 +0000
ROA not after:            Sat 12 Sep 2026 09:00:11 +0000
asID:                     36678
IP address blocks:        2605:9d80:a000::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2a:d4:57:05:73:99:a9:c3:46:2f:ff:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf
        Validity
            Not Before: Jun 14 09:00:11 2026 GMT
            Not After : Sep 12 09:00:11 2026 GMT
        Subject: CN=82c29471-8090-4446-ae5f-9bc7b1b55453
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:8f:5c:cd:69:47:f4:44:fd:8d:eb:b2:68:6e:
                    9f:ca:82:85:ba:f9:54:65:52:19:c6:e5:7b:e5:f1:
                    3c:40:3e:44:e6:b6:77:0f:0d:7c:98:55:72:39:0a:
                    d2:0a:4c:fb:53:34:58:b7:ff:36:45:3a:74:49:51:
                    e2:35:44:c3:f8:66:d4:de:5d:1f:ef:18:c6:bd:73:
                    91:f1:31:f8:3e:17:90:3b:5a:7c:59:99:e9:10:ba:
                    6d:1b:32:17:77:2e:79:75:9a:16:1e:62:72:55:cf:
                    43:00:5b:98:d4:33:63:ab:4e:38:3f:8e:b7:26:f7:
                    77:d3:b3:50:2f:99:02:44:d0:8d:7c:b1:64:1c:b9:
                    30:16:eb:a7:d3:be:0a:73:ec:ff:da:10:eb:97:e1:
                    3e:32:1a:a0:8c:e5:80:76:c9:33:06:6f:99:3d:cb:
                    ba:57:fc:2f:10:6d:16:f6:b3:9b:8f:15:c9:e0:4f:
                    cd:a5:6e:44:59:34:34:38:18:2f:db:93:51:26:aa:
                    b2:78:5b:2d:72:bf:80:9e:0e:fe:8b:06:91:43:f9:
                    64:07:07:f1:e8:4c:c0:87:0f:60:5c:de:f7:b0:f4:
                    de:e3:29:76:c2:c1:99:9a:be:57:31:16:a8:94:f4:
                    0b:85:16:c9:bb:e4:6c:2d:60:f3:ac:1a:33:cd:70:
                    16:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:B6:CA:5D:08:85:0B:00:5E:A5:57:9A:5F:FF:7C:02:F8:F8:6A:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/7ff95407-f623-3c8e-89da-22d5b27ee0b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.crl

            X509v3 Authority Key Identifier:
                keyid:79:4E:35:8D:AC:45:13:27:8B:65:94:A9:E2:BA:54:F4:4C:0A:4D:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9d80:a000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:0c:8a:3b:c9:f5:1b:84:89:0b:2e:e9:45:f1:a3:6e:2f:3a:
         9a:b2:d5:28:1e:52:0e:30:0f:49:65:ad:cc:e7:90:c2:10:0d:
         30:1e:81:b1:ff:f0:72:4f:07:77:fa:d4:a7:0e:5f:0b:74:7c:
         11:88:f0:92:f7:69:63:1f:8f:e5:12:35:7d:ac:b6:b4:b4:42:
         16:66:e6:8a:fd:ff:2e:30:ba:e4:d7:f1:14:86:53:81:8a:a0:
         09:ba:a5:33:04:6f:c8:34:3b:cb:e7:00:33:ea:59:a7:73:04:
         8c:c5:f0:07:97:83:0d:bc:41:8e:3c:84:29:dc:ed:6d:45:56:
         0d:25:07:22:4d:2b:89:99:9b:45:50:71:54:a3:32:dd:29:91:
         37:a4:2c:22:ac:fe:40:86:e6:a8:9c:26:fe:79:63:a2:26:40:
         94:0a:74:ee:cf:69:bc:95:e9:a3:62:a6:ba:9d:85:85:39:fc:
         7d:5d:66:1b:42:04:9a:0b:4c:df:83:7d:ec:88:b5:df:d1:42:
         d0:7d:1b:6e:fd:7d:2c:7f:ae:37:47:b7:c1:70:f2:8b:c3:4b:
         59:83:75:af:c7:54:9f:ff:09:d8:9f:48:4e:bb:7b:49:8c:5c:
         5c:9d:22:f5:da:65:ee:d4:69:88:77:ca:71:ac:0f:87:b8:94:
         74:f4:e3:99
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE4q1FcFc5mpw0Yv/4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTE4Y2Q4M2MtZjdhMC00YmQxLWE5NmUtZDA4NWZmNzhl
Y2FmMB4XDTI2MDYxNDA5MDAxMVoXDTI2MDkxMjA5MDAxMVowLzEtMCsGA1UEAxMk
ODJjMjk0NzEtODA5MC00NDQ2LWFlNWYtOWJjN2IxYjU1NDUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo49czWlH9ET9jeuyaG6fyoKFuvlUZVIZxuV7
5fE8QD5E5rZ3Dw18mFVyOQrSCkz7UzRYt/82RTp0SVHiNUTD+GbU3l0f7xjGvXOR
8TH4PheQO1p8WZnpELptGzIXdy55dZoWHmJyVc9DAFuY1DNjq044P463Jvd307NQ
L5kCRNCNfLFkHLkwFuun074Kc+z/2hDrl+E+MhqgjOWAdskzBm+ZPcu6V/wvEG0W
9rObjxXJ4E/NpW5EWTQ0OBgv25NRJqqyeFstcr+Ang7+iwaRQ/lkBwfx6EzAhw9g
XN73sPTe4yl2wsGZmr5XMRaolPQLhRbJu+RsLWDzrBozzXAWTwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFE62yl0IhQsAXqVXml//fAL4+GpnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lMThj
ZDgzYy1mN2EwLTRiZDEtYTk2ZS1kMDg1ZmY3OGVjYWYvN2ZmOTU0MDctZjYyMy0z
YzhlLTg5ZGEtMjJkNWIyN2VlMGIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTE4Y2Q4M2MtZjdhMC00YmQxLWE5
NmUtZDA4NWZmNzhlY2FmL2UxOGNkODNjLWY3YTAtNGJkMS1hOTZlLWQwODVmZjc4
ZWNhZi5jcmwwHwYDVR0jBBgwFoAUeU41jaxFEyeLZZSp4rpU9EwKTccwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9lMThjZDgzYy1mN2EwLTRiZDEtYTk2ZS1kMDg1
ZmY3OGVjYWYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgWdgKAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAogyKO8n1G4SJCy7pRfGjbi86mrLVKB5SDjAPSWWtzOeQwhANMB6B
sf/wck8Hd/rUpw5fC3R8EYjwkvdpYx+P5RI1fay2tLRCFmbmiv3/LjC65NfxFIZT
gYqgCbqlMwRvyDQ7y+cAM+pZp3MEjMXwB5eDDbxBjjyEKdztbUVWDSUHIk0riZmb
RVBxVKMy3SmRN6QsIqz+QIbmqJwm/nljoiZAlAp07s9pvJXpo2Kmup2FhTn8fV1m
G0IEmgtM34N97Ii139FC0H0bbv19LH+uN0e3wXDyi8NLWYN1r8dUn/8J2J9ITrt7
SYxcXJ0i9dpl7tRpiHfKcawPh7iUdPTjmQ==
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:20:21 2026 by rpki-client